PT-2001-2182 · Gnu · Findutils

Published 2001-08-31 · Updated 2017-10-10 · CVE-2001-1036

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions findutils version 4.1

Description The issue allows local users to gain privileges via an old formatted filename database that contains an entry with an out-of-range offset, causing the locate function to write to arbitrary process memory.

Recommendations For findutils version 4.1, update to a newer version that fixes this issue to prevent local users from gaining privileges.

Exploit

Fix

Related Identifiers

CVE-2001-1036

Affected Products

Findutils

References · 6

• 🔥 https://exploit-db.com/exploits/21043 · Exploit
• 🔥 http://securityfocus.com/bid/3127 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1036 · Security Note
• http://osvdb.org/5477 · Note
• http://securityfocus.com/archive/1/200991 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6932 · Note